This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0DwIoU28rej6ec_NjXGqq7MftFU.roa File: 0DwIoU28rej6ec_NjXGqq7MftFU.roa (raw, json) Hash identifier: SihTmOGZSsFWiTspvBbuWUvQPCoduENn/WI0Ynld+9M= Subject key identifier: D0:3C:08:A1:4D:BC:AD:E8:FA:79:CF:CD:8D:71:AA:AB:B3:1F:B4:55 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F848357C9A7D26CE51FEC3EEE95B1DF Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0DwIoU28rej6ec_NjXGqq7MftFU.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140641 IP address blocks: 31.57.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:83:57:c9:a7:d2:6c:e5:1f:ec:3e:ee:95:b1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d03c08a14dbcade8fa79cfcd8d71aaabb31fb455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:e1:df:21:b2:33:32:05:68:a2:64:97:fb: c6:22:79:e4:75:74:d4:3f:14:3f:d1:5d:8e:78:e2: c8:60:8d:0f:55:9b:cb:f0:f3:85:68:38:7e:ac:1f: ad:ef:28:11:ca:49:86:53:b7:e2:fe:38:49:de:e3: 0a:e1:df:a4:e9:6f:d7:f2:dc:d0:e2:4f:23:0c:56: f8:72:f7:d1:b0:e3:04:33:6e:9d:5c:b4:fb:31:c4: 90:82:57:d0:da:85:c9:60:8c:69:d8:08:3e:37:2f: b4:aa:45:b6:36:c3:db:7c:10:5c:01:c6:5d:38:fc: c8:9b:7d:48:a8:ce:86:da:c6:da:9d:84:f2:bb:17: 84:0d:58:8a:24:ca:f8:74:17:92:30:59:04:77:df: dc:ec:c2:a2:4d:84:10:c5:31:72:c8:29:78:a3:df: 45:71:d3:8a:1b:91:5c:ca:ab:69:62:f0:fb:25:d2: dd:e0:c9:26:8a:28:d9:17:7d:3b:6a:96:ca:76:80: 2a:a1:c1:54:81:e6:3a:7f:00:88:fc:f9:3b:45:e7: 0c:5d:c2:72:89:9c:71:04:25:9f:d5:22:68:b1:79: 6c:9e:e9:a8:b4:d8:ea:dc:17:fb:fc:c7:cf:34:d9: a7:60:ca:bc:58:55:11:77:e5:ab:a5:e7:cd:0c:bd: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3C:08:A1:4D:BC:AD:E8:FA:79:CF:CD:8D:71:AA:AB:B3:1F:B4:55 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0DwIoU28rej6ec_NjXGqq7MftFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.189.0/24 Signature Algorithm: sha256WithRSAEncryption 89:43:08:d6:12:b4:03:fa:c8:0d:ef:3c:a0:a0:ab:3c:fc:96: f3:ff:fa:2d:ee:21:b6:cd:cd:e8:a4:68:8f:7a:95:ea:bc:a2: c7:2a:b0:55:3b:2e:bf:a7:dd:52:fc:1c:9c:06:4e:41:bd:b5: fa:af:ef:0b:88:e7:ef:ae:de:5e:3f:9f:70:8d:00:94:47:55: ec:69:4c:6a:e6:b7:02:8e:9b:1d:b8:26:5d:15:cf:9e:c7:2c: 95:d7:8d:f1:d7:05:cd:3e:aa:52:05:ca:fb:99:a5:c3:e5:14: b2:a3:15:5a:72:3f:a6:45:9c:ac:b0:9d:14:13:5f:48:e5:0a: f1:31:65:30:bc:44:a1:da:94:1a:af:05:c7:7a:a2:99:08:15: 1d:56:a9:45:9b:b0:cd:2c:34:b8:3c:92:59:1b:f4:7e:a8:91: fb:11:07:76:2f:69:16:93:c9:83:3a:df:ee:a7:5d:11:f8:8b: f1:50:83:70:cc:98:32:1a:ea:14:10:66:0e:0b:84:58:8b:55: b6:2c:d6:29:44:6e:53:53:db:7c:e3:fd:2c:05:89:d1:79:7e: 52:b2:39:35:60:17:fe:4b:78:00:c7:90:7c:60:01:5c:75:9a: 62:33:59:bc:b2:d7:8f:88:77:7a:36:9e:84:81:79:3f:c7:6a: fc:1f:a8:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hINXyafSbOUf7D7ulbHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDNjMDhhMTRkYmNhZGU4ZmE3OWNmY2Q4ZDcxYWFhYmIzMWZiNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1knh3yGyMzIFaKJkl/vGInnkdXTU PxQ/0V2OeOLIYI0PVZvL8POFaDh+rB+t7ygRykmGU7fi/jhJ3uMK4d+k6W/X8tzQ 4k8jDFb4cvfRsOMEM26dXLT7McSQglfQ2oXJYIxp2Ag+Ny+0qkW2NsPbfBBcAcZd OPzIm31IqM6G2sbanYTyuxeEDViKJMr4dBeSMFkEd9/c7MKiTYQQxTFyyCl4o99F cdOKG5FcyqtpYvD7JdLd4MkmiijZF307apbKdoAqocFUgeY6fwCI/Pk7RecMXcJy iZxxBCWf1SJosXlsnumotNjq3Bf7/MfPNNmnYMq8WFURd+WrpefNDL0XcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNA8CKFNvK3o+nnPzY1xqquzH7RVMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMER3SW9VMjhyZWo2ZWNfTmpYR3FxN01mdEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzm9MA0G CSqGSIb3DQEBCwUAA4IBAQCJQwjWErQD+sgN7zygoKs8/Jbz//ot7iG2zc3opGiP epXqvKLHKrBVOy6/p91S/BycBk5BvbX6r+8LiOfvrt5eP59wjQCUR1XsaUxq5rcC jpsduCZdFc+exyyV143x1wXNPqpSBcr7maXD5RSyoxVacj+mRZyssJ0UE19I5Qrx MWUwvESh2pQarwXHeqKZCBUdVqlFm7DNLDS4PJJZG/R+qJH7EQd2L2kWk8mDOt/u p10R+IvxUINwzJgyGuoUEGYOC4RYi1W2LNYpRG5TU9t84/0sBYnReX5Ssjk1YBf+ S3gAx5B8YAFcdZpiM1m8stePiHd6Np6EgXk/x2r8H6hS -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:05 2026 by rpki-client